shamil I made my root CA a while ago, and then I made an intermediary CA. I can then do one of two things which are easy and obvious. 1. ./pkitool --csr client1 (creating unsigned is not a problem) 2. ./pkitool --sign client1 (great for signing with the root CA; what i don't want to do) What's not obvious. I haven't found anyway in pkitool to specify which CA i want an unsigned key signed by. Scouring google has also yielded nothing. How to do?
shamil SOLVED I found the cook book. No one else likes to detail setting up an intermediary ca anywhere on the net...that is next to unbelievable.
Traffic shamil wroteI found the cook bookI presume you mean JJK's excellent work 😉 Good place for a quick plug: https://openvpn.net/index.php/open-source/books.html You are welcome to share your solution here .. 8-)
